[Bug 35837] New: It would be useful to understand what plugins are being used in the wild.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Bug ID: 35837 Summary: It would be useful to understand what plugins are being used in the wild. Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs@lists.koha-community.org Reporter: martin.renvoize@ptfs-europe.com QA Contact: testopia@bugs.koha-community.org HEA hasn't seen much love of late.. it would be great to send back statistics on plugins used in an installation. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |matt.blenkinsop@ptfs-europe | |.com -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pedro.amorim@ptfs-europe.co | |m --- Comment #1 from Martin Renvoize <martin.renvoize@ptfs-europe.com> --- This likely makes more sense as part of the upcoming plugin store that's been proposed -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Pedro Amorim <pedro.amorim@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|It would be useful to |Add a fully fledged plugin |understand what plugins are |store to Koha |being used in the wild. | CC| |andrew.auld@ptfs-europe.com | |, | |jonathan.druart@gmail.com, | |katrin.fischer@bsz-bw.de, | |martin.renvoize@ptfs-europe | |.com, | |paul.derscheid@lmscloud.de, | |tomascohen@gmail.com Status|NEW |In Discussion --- Comment #2 from Pedro Amorim <pedro.amorim@ptfs-europe.com> --- Hi all, updating this bug to plugin store and setting "In Discussion" for now as the project is currently an MVP and testers/discussion would be great. The store repo: https://github.com/PTFS-Europe/koha-plugin-store The koha client branch: https://github.com/PTFS-Europe/koha/commits/plugin_store/ We're currently hosting a dev environment for the store at: https://plugin-store.koha-ptfs.co.uk/ If you check out the Koha client branch above you should be able to test, or reach out if you're finding it hard or want to add to the discussion. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Pedro Amorim <pedro.amorim@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jake.deery@ptfs-europe.com, | |koha@trust-box.at, | |victor@tuxayo.net -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Pedro Amorim <pedro.amorim@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |brendan@bywatersolutions.co | |m, | |kyle@bywatersolutions.com -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook@prosentient.com.au -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Victor Grousset/tuxayo <victor@tuxayo.net> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=35837#c2 -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #3 from David Cook <dcook@prosentient.com.au> --- One question... why does the test environment show Email and Password in the Users List to anonymous users? -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #4 from Pedro Amorim <pedro.amorim@ptfs-europe.com> --- (In reply to David Cook from comment #3)
One question... why does the test environment show Email and Password in the Users List to anonymous users?
Dev work leftovers. Its initial purpose was to make it obvious that passwords are not stored in plain text. Users are not planned to be listed to others. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #5 from Pedro Amorim <pedro.amorim@openfifth.co.uk> --- TODOs agreed at Koha Hackfest 2025 Plugin store Koha client: Immediate: 1) Search by plugin Name and Description 2) Sort by plugin Name, Author 3) plugin store permission to allow viewing of store plugins 4) plugin store permission to allow installation of store plugins 5) Display the number of downloads of a plugin, display the number of downloads of a release 6) Display link to plugin github repo on the Koha client 7) Have a plugin metadata entry for 'documentation' and make it recommendable i.e. provide message on the plugin submission flow 8) Move the plugin store app to the koha-community github namespace Later: 1) Display plugin reviews 2) Display start ratings 3) Display translations Plugin store mojo app: Immediate: 1) Implement plugin listing pagination/filtering on webpage 2) Implement plugin listing pagination/filtering on REST API 3) Add Github registration/authentication for users and drop previous traditional registration/authentication method 4) Users no longer submit a plugin through github URL, they should pick a repo from a list of their own, or from organizations they belong to 5) Make it possible for an authenticated user to delete a plugin or a plugin release 6) Remove display of users on webpage 7) Drop thumbnail functionality. Planned for later. 8) Add a contact link for developers to ask for login access 9) Add maximum_koha_version metadata check / make it recommendable i.e. does not block plugin submission Later: 1) Support plugin repos from gitlab (currently only from github) 2) Add Gitlab registration/authentication and allow sub 3) When a thumbnail feature exists in the core Koha plugin system, the plugin store should support displaying. 4) Documentation page including: How to package your plugins to include Icons/Thumbnails 5) Add a badge system for community rating of plugins 6) Add storage and API for plugin star ratings 7) Add storage and API for plugin reviews 8) Add GPG signature checks for plugins -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #6 from David Cook <dcook@prosentient.com.au> --- Will there be a koha-conf.xml option to turn it off or will it be based off the configuration of repos? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #7 from Pedro Amorim <pedro.amorim@openfifth.co.uk> --- (In reply to David Cook from comment #6)
Will there be a koha-conf.xml option to turn it off or will it be based off the configuration of repos?
Hi David, I believe the idea is to have it always turned on, restricted by new staff permissions: (In reply to Pedro Amorim from comment #5)
3) plugin store permission to allow viewing of store plugins 4) plugin store permission to allow installation of store plugins
Or maybe possibly even by existing ones (eg manage_plugins)? I may have misunderstood the question! Let me know if this doesn't answer it. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #8 from David Cook <dcook@prosentient.com.au> --- (In reply to Pedro Amorim from comment #7)
Or maybe possibly even by existing ones (eg manage_plugins)? I may have misunderstood the question! Let me know if this doesn't answer it.
What I mean is... even though I think it's a really cool idea and it would be helpful for many Koha instances around the world, we probably won't want to use it for most of our hosted Koha instances. From a security perspective with our servers, we require any plugin installed to first be reviewed by us, so we wouldn't want staff users to be able to install plugins on their own. I'm just curious if there will be a way to disable this plugin store feature, or if I'll need to do a local customization to disable it. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Katie Bliss <kebliss@dmpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kebliss@dmpl.org -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Lisette Scheer <lisette@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lisette@bywatersolutions.co | |m -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #9 from Tomás Cohen Arazi (tcohen) <tomascohen@gmail.com> --- (In reply to David Cook from comment #8)
(In reply to Pedro Amorim from comment #7)
Or maybe possibly even by existing ones (eg manage_plugins)? I may have misunderstood the question! Let me know if this doesn't answer it.
What I mean is... even though I think it's a really cool idea and it would be helpful for many Koha instances around the world, we probably won't want to use it for most of our hosted Koha instances. From a security perspective with our servers, we require any plugin installed to first be reviewed by us, so we wouldn't want staff users to be able to install plugins on their own.
I'm just curious if there will be a way to disable this plugin store feature, or if I'll need to do a local customization to disable it.
I agree this should be enabled through some koha-conf.xml entry globally, and then require special permissions. I also agree it should be enabled by default and let vendors deal with their preference regarding the store. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #10 from Jonathan Druart <jonathan.druart@gmail.com> ---
I also agree it should be enabled by default and let vendors deal with their preference regarding the store.
IMO it must be disabled by default, with a clear warning regarding the risks if you enable it and install plugins. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #11 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- I think it might be better to error on the save side. What about a compromise? * OFF for existing installations * ON for new installations -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 --- Comment #12 from Andrew Auld <andrew.auld@openfifth.co.uk> --- This is a feature that has been discussed as a good step forward for several years. The discussion at the last hackfest in Marseille was very positive about it as an addition to Koha. Similarly at the DACH Koha hackfests I have attended and a Kohacon. We are really hoping to come to Marseille this year with the feature at a point where it is 'nearly ready to go' so we really welcome positive ideas and thoughts about how to get the feature to a stage where it will be as universally useful as possible, has any necessary and agreed upon safeguards (ability to turn off etc), and has a good number of people keen to support it and add to the features and functionality over time. As well as to test and sign it off at the hackfest. Really looking forward to a great new addition for the benefit of many in the community who currently struggle to find, implement and trust plugins. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35837 Michaela Sieber <michaela.sieber@kit.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |clemens.tubach@kit.edu, | |michaela.sieber@kit.edu -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org